NVD

Id
70980  
Name
CVE-2004-0549  
Description
The WebBrowser ActiveX control, or the Internet Explorer HTML rendering engine (MSHTML), as used in Internet Explorer 6, allows remote attackers to execute arbitrary code in the Local Security context by using the showModalDialog method and modifying the location to execute code such as Javascript, as demonstrated using (1) delayed HTTP redirect operations, and an HTTP response with a Location: header containing a "URL:" prepended to a "ms-its" protocol URI, or (2) modifying the location attribute of the window, as exploited by the Download.ject (aka Scob aka Toofer) using the ADODB.Stream object.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2004-08-06  
Modified Date
2017-07-10  
Seq
2004-0549  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
366339 70980 CVE-2004-0549 http://62.131.86.111/analysis.htm  View
366340 70980 CVE-2004-0549 20040602 180 Solutions Exploits and Toolbars Hacking Patched Users(I.E Exploits)  View
366341 70980 CVE-2004-0549 20040606 Internet explorer 6 execution of arbitrary code (An analysis of the 180 Solutions Trojan)  View
366342 70980 CVE-2004-0549 20040621 IE/0DAY -> Insider Prototype  View
366343 70980 CVE-2004-0549 20040628 JS.Scob.Trojan Source Code ...  View
366344 70980 CVE-2004-0549 oval:org.mitre.oval:def:1133  View
366345 70980 CVE-2004-0549 oval:org.mitre.oval:def:207  View
366346 70980 CVE-2004-0549 oval:org.mitre.oval:def:241  View
366347 70980 CVE-2004-0549 oval:org.mitre.oval:def:519  View
366348 70980 CVE-2004-0549 http://umbrella.name/originalvuln/msie/InsiderPrototype/  View
366349 70980 CVE-2004-0549 VU#713878  View
366350 70980 CVE-2004-0549 MS04-025  View
366351 70980 CVE-2004-0549 TA04-163A  View
366352 70980 CVE-2004-0549 TA04-184A  View
366353 70980 CVE-2004-0549 TA04-212A  View
366354 70980 CVE-2004-0549 ie-location-restriction-bypass(16348)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62886 JVNDB-2004-000228 Microsoft Internet Explorer の ADODB.Stream オブジェクトにおける任意のファイルを作成される脆弱性 Microsoft Internet Explorer には、 ADODB.Stream オブジェクトを不正に利用することで標的システム上に任意のファイルを作成、あるいは上書きできる脆弱性が存在します。 CVE-2004-0549 8976 CVE-2004-0549 70980 10 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000228.html 2004-06-10 2007-04-01 View